Password Best Practice for HPUX 11.23 and Constraint

[apple]

I would like to post 2 questions with regard to the subject above:
1. can we set the root password to no-expiry. I heard HP mention about C2 profile etc.

2. Is that true we can only set numbers and characters in numbers only for root password. we can't have @$ in our password.

i can't find any forum discussing about this. really hope to hear from you. many thanks in advance

[VK2COT · Accepted solution]

Hello,

If you are talking about C2 security level,
then disabling password expiration for root
is not a good option.

Anyway, you can disable password expiration
per individual Unix account, including root.

About valid characters for passwords:

Avoid password characters which have special
meaning to the tty driver, such as # (erase)
and @ (kill). You may not be able to login
with these characters (depends on your setting - check with "stty -a").
It is well documented in on-line manuals for
passwd.

If your tty settings are causing problems,
you may have to quote these special characters with "\".

Cheers,

VK2COT

[Jeeshan]

Hi

>>can we set the root password to no-expiry. I heard HP mention about C2 profile etc

Yes you can, but modifying any attribute of root user handled very much carefully.

>>Is that true we can only set numbers and characters in numbers only for root password. we can't have @$ in our password.

Yes you can use #@$%& characters in your root password.

Go to http://docs.hp.com site.

[Ramasubramanian Krishna]

==> Is that true we can only set numbers and characters in numbers only for root password. we can't have @$ in our password

Yes its true you can use special characters, but with some of the special characters you will not be able to login to the console.